Lucene search

K
osvGoogleOSV:RLSA-2023:3714
HistoryAug 31, 2023 - 4:55 p.m.

Moderate: postgresql security update

2023-08-3116:55:40
Google
osv.dev
7
postgresql
security fix
schema_element
row security policies
user id changes
cvss score
acknowledgments

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.6%

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)

  • postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.